Lucene search
HistoryMay 19, 2006 - 10:02 a.m.
CVE-2006-2469
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.006
Percentile
77.8%
The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges.
Affected configurations
Node
beaweblogic_serverMatch6.0sp6
ORbeaweblogic_serverMatch6.1
ORbeaweblogic_serverMatch6.1sp1
ORbeaweblogic_serverMatch6.1sp2
ORbeaweblogic_serverMatch6.1sp3
ORbeaweblogic_serverMatch6.1sp4
ORbeaweblogic_serverMatch6.1sp5
ORbeaweblogic_serverMatch7.0
ORbeaweblogic_serverMatch7.0sp1
ORbeaweblogic_serverMatch7.0sp2
ORbeaweblogic_serverMatch7.0sp3
ORbeaweblogic_serverMatch7.0sp4
ORbeaweblogic_serverMatch7.0sp5
ORbeaweblogic_serverMatch8.1
ORbeaweblogic_serverMatch8.1sp1
ORbeaweblogic_serverMatch8.1sp2
ORbeaweblogic_serverMatch8.1sp3
ORbeaweblogic_serverMatch8.1sp4
ORbeaweblogic_serverMatch9.0
Related
prion
prion
Default credentials
2006-05-19 10:02:00
cve
cve
CVE-2006-2469
2006-05-19 10:02:00
cvelist
cvelist
CVE-2006-2469
2006-05-19 10:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.006
Percentile
77.8%
Related for NVD:CVE-2006-2469